Angela Lang/CNET
Up to 80% of Americans are on government-mandated lockdowns, forcing many of them to work from home while they keep away from work to avoid spreading the novel coronavirus. Many of these people use technology to access their work called virtual private networks, or VPNs. And now Microsoft says those companies — and specifically healthcare workers — need to be on the lookout for a different breed of threats that come from them.
The tech giant took what it says is its first-ever step to warn hospitals about this threat. “Ransomware operators have identified a practical target — network devices like gateway and virtual private network (VPN) appliances,” Microsoft said in a statement. “These are more difficult to remediate because it can be challenging for defenders to go and extensively hunt to find where the ransomware attackers have established persistence and identify what has been compromised.”
Watch this:
Coronavirus lockdown: Why social distancing saves lives
5:41
Microsoft’s making its warning because companies around the world are leaning on VPN technology to allow employees stuck at home to access sensitive work apps and documents. Microsoft’s concerned some companies aren’t as prepared for the hackers who attack using that technology.
Microsoft has good reason to be concerned.
At the end of February, just as the western world was ramping up its response to the coronavirus, hotel chain Marriott detected “an unexpected amount of guest information” that had been accessed. All told, it said data from 5.2 million customers may have been compromised, including names, mailing addresses, phone numbers, birthday days and months, and more. Marriott hasn’t disclosed details of the hack, nor whether VPN software was involved, but it’s a reminder that hackers aren’t slowing their activity during the crisis.
In its blog post Wednesday, Microsoft suggested similar steps to CNET’s own recommendations for remote workers to protect themselves and their company’s data. Among them was to keep applying security updates (something people still regularly don’t do, and is the reason behind some hacks.) Microsoft also recommended companies reduce people’s access to most documents, only people who need it have access to various data.
